CVE-2026-69673: Link-following local privilege escalation in Windows Update · ZeroHour

CVE-2026-69673

mass

Link-following local privilege escalation in Windows Update

CVSS 3.1

7.8 high

EPSS

—

Published

Oct 13, 2026 (3d ago)

Modified

Oct 13, 2026

AI analysis

CVE-2026-69673 is an improper link resolution before file access (CWE-59, link following) flaw in Microsoft Windows Update. A locally authorized attacker with low privileges can trigger it without user interaction to follow a link during file access and elevate privileges. Successful exploitation yields high impact to confidentiality, integrity, and availability on the local system (CVSS 3.1 base score 7.8). It affects Windows systems that use the vulnerable Windows Update component; exact build ranges are not stated in the source data, and Microsoft’s October 2026 Patch Tuesday is reported to address it among a large set of fixes. There is no known public proof of concept and it is not listed in CISA’s Known Exploited Vulnerabilities catalog.

What to do: Install Microsoft’s October 2026 Patch Tuesday security updates that cover Windows Update as soon as they are available for your Windows builds. Until systems are patched, limit local logon to trusted accounts and watch for unexpected privilege changes; no public exploit or CISA KEV listing is known from this data.

Affected

Microsoft Windows Update

—

Estimated exposure

mass≈1 billion Windows devices (Windows Update ships with the OS) — Windows Update is a built-in component of essentially all supported Windows client and server installations, and public market figures put active Windows devices on the order of a billion or more, so the vulnerable component is ubiquitous…

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description

Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.

Weakness: CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (—)

CVE-2026-69673

In the news1 stories

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)